impacket

Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...

CVE-2026-51366-SQL-Injection-leading-to-Remote-Code-Execution

CVE-2026-51366 SQL Injection leading to Remote Code Execution Field| Value ---|--- CVE ID| CVE-2026-51366 Product| Vedo Suite Bottinelli Informatica Affected version| v1.2.5 and possibly earlier versions sharing the same endpoint logic Vulnerability class| CWE-89: SQL Injection Secondary impact|...

mssql-command-tool

mssql Terminal Connection Tool | Command Execution Example ./mssql-command-tool-mac -s 10.10.10.10 -u sa -p jas502n -P 1433 -c "whoami" nt service\mssqlserver ./mssql-command-tool-mac -s 10.10.10.10 -u sa -p jas502n -P 1433 -c "net user" \ 的用户帐户...

MSSQL-Pentest-Cheatsheet

🗄️ MSSQL Pentest Cheatsheet A practical Microsoft SQL Server penetration testing cheat sheet designed for penetration testers, red teamers, and cybersecurity learners to understand how to enumerate, exploit, and abuse misconfigured MSSQL databases during security assessments. 🌐 Connect With Us 🔵...

cve-2024-50330-ivanti_epm_sqli_reproduction

CVE-2024-50330: Ivanti Endpoint Manager EPM SQL Injection to RCE Overview CVE-2024-50330 is a critical pre-authentication SQL injection vulnerability in Ivanti Endpoint Manager EPM that allows a remote unauthenticated attacker to achieve remote code execution on the target server. The vulnerabili...

CVE-2026-59105

Jumis formerly Tildes Jumis creates and uses a Microsoft SQL Server login named TildeJumisAdmin whose password is derived deterministically from a single non-secret input - the SQL Server name @@servername. The derivation algorithm is hard-coded in the client application and is identical across...

EUVD-2026-118266

Jumis formerly Tildes Jumis creates and uses a Microsoft SQL Server login named TildeJumisAdmin whose password is derived deterministically from a single non-secret input - the SQL Server name @@servername. The derivation algorithm is hard-coded in the client application and is identical across...

CVE-2026-59105 Universal sysadmin credential vulnerability in Jumis

Jumis formerly Tildes Jumis creates and uses a Microsoft SQL Server login named TildeJumisAdmin whose password is derived deterministically from a single non-secret input - the SQL Server name @@servername. The derivation algorithm is hard-coded in the client application and is identical across...

CVE-2026-59105

The software Jumis (formerly Tildes Jumis) is vulnerable to a universal sysadmin credential flaw. The application creates a Microsoft SQL Server login, ##Tilde_JumisAdmin## , with a password derived deterministically from the non-secret SQL Server name (@@servername) using a hard-coded algorithm ...

CVE-2026-59105: Jumis Pro SIA Jumis: Jumis (formerly Tildes Jumis) creates and uses a Microsoft SQL Server login named ##Tilde_JumisAdmin## whose password…

Jumis formerly Tildes Jumis creates and uses a Microsoft SQL Server login named TildeJumisAdmin whose password is derived deterministically from a single non-secret input - the SQL Server name @@servername. The derivation algorithm is hard-coded in the client application and is identical across...

Countersoft Gemini Authenticated SQL Injection to xp_cmdshell RCE — Detect

Fingerprint / reachability check for Countersoft Gemini Authenticated SQL Injection to xpcmdshell RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Countersoft Gemini Authenticated SQL Injection to xpcmdshell RCE""" from kittysploit import from lib.protocols.http.httpclient import...

Telaeris XPressEntry unauthenticated SQLi RCE

Unauthenticated POST /activities injects stacked T-SQL via sNotes to enable xpcmdshell and run attacker commands on the backend SQL Server. !/usr/bin/env python3 -- coding: utf-8 -- """Telaeris XPressEntry unauthenticated SQL injection to xpcmdshell.""" from future import annotations import uuid...

Countersoft Gemini SQL injection xp_cmdshell RCE

After /account/login, stacked SQL in GetCustomFieldValue term enables xpcmdshell Windows, blind marker file. !/usr/bin/env python3 -- coding: utf-8 -- """Countersoft Gemini authenticated SQLi to xpcmdshell RCE.""" from future import annotations import re from urllib.parse import urlencode from...

Lansweeper LicenseActions second-order SQLi RCE

Authenticated addsqlserver stores malicious Name; getsqlservers triggers second-order SQL injection and xpcmdshell. !/usr/bin/env python3 -- coding: utf-8 -- """Lansweeper LicenseActions second-order SQLi to xpcmdshell RCE.""" from future import annotations import json import re import time from...

DBxtra .NET — Unauthenticated SOAP xp_cmdshell RCE — Detect

Fingerprint / reachability check for DBxtra .NET — Unauthenticated SOAP xpcmdshell RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for DBxtra .NET — Unauthenticated SOAP xpcmdshell RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Inflectra SpiraTeam — PlanningBoard yAxisKey SQLi → xp_cmdshell RCE — Detect

Fingerprint / reachability check for Inflectra SpiraTeam — PlanningBoard yAxisKey SQLi → xpcmdshell RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Inflectra SpiraTeam — PlanningBoard yAxisKey SQLi → xpcmdshell RCE""" from kittysploit import from lib.protocols.http.httpclient impor...

Logo Netsis NetOpenX REST 2.0.6.9 — Unauthenticated SQL Injection to xp_cmdshell — Detect

Fingerprint / reachability check for Logo Netsis NetOpenX REST 2.0.6.9 — Unauthenticated SQL Injection to xpcmdshell SYSTEM RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Logo Netsis NetOpenX REST 2.0.6.9 — Unauthenticated SQL Injection to xpcmdshell SYSTEM RCE""" from kittysploit...

DBxtra .NET unauthenticated SOAP xp_cmdshell RCE

Unauthenticated DBxtraService.asmx chains ProjectConnectionInsertDB, ProjectObjectInsertDB xpcmdshell SQL, UpdateDatabaseVersion, and DataGrid.aspx viewer execution. !/usr/bin/env python3 -- coding: utf-8 -- """DBxtra .NET unauthenticated SOAP xpcmdshell RCE.""" from future import annotations...

Netsis NetOpenX token endpoint SQLi xp_cmdshell RCE

Unauthenticated POST /api/v2/token idmuserid parameter stacked SQL enables xpcmdshell on the backend SQL Server. """Logo Netsis NetOpenX OAuth token SQLi to xpcmdshell RCE.""" from future import annotations import re import time from urllib.parse import urlencode from kittysploit import from...

CVE-2026-112252

A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5. Affected is the function xpcmdshell of the file /ws.asmx. The manipulation of the argument sql leads to sql injection. The attack may be initiated remotely...